Privacy Policy
Last updated: 9 August 2026
This policy describes how the personal data of users of the "Who am I?" website (whoami.syntropic-studio.fr) is processed, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.
1. Data controller
The data controller is Maxence CORGIER, sole trader (entrepreneur individuel) operating under the trade name SYNTROPIC, 13 rue Transversale, 69009 Lyon, France. Contact: contact@syntropic-studio.fr.
2. Data collected, purposes and legal bases
At the end of the test (before any purchase). The following are recorded: your answers to the questionnaire, the calculated scores, the resulting archetype, the language and the date. This data is recorded without identifying you (without your email address). Purpose: to generate your result and allow you, where applicable, to unlock the Report. Legal basis: legitimate interest in providing the requested service.
The email address you enter on the Site to display your archetype is not transmitted to our servers at that stage; it is only recorded at the time of purchase.
When purchasing the Report. The following are processed: your email address, payment information (processed by Stripe; we do not receive your card number), the status and date of payment, the payment session identifier, the timestamp and text of your waiver of the right of withdrawal, and the date the delivery email was sent. Purposes: to process the order, deliver the Report, provide customer service, keep proof of the transaction and of the waiver, and comply with our accounting obligations. Legal bases: performance of the contract; compliance with a legal obligation (accounting); legitimate interest (proof, fraud prevention).
3. Recipients and processors
Your data is neither sold nor rented. It is accessible to the publisher and to its technical processors, acting on its instructions:
- Supabase: database hosting (European Union, Ireland);
- Stripe: payment processing;
- Resend: sending the Report delivery email;
- Netlify: hosting of the Site.
4. Transfers outside the European Union
The database is hosted in the European Union. Some processors (Stripe, Resend, Netlify) may process data in the United States. These transfers are governed by appropriate safeguards, such as the European Commission's standard contractual clauses and/or the EU-US Data Privacy Framework.
5. Retention periods
Test results not linked to a purchase (answers, scores, archetype, language, date). These records contain no data that identifies you: no name, no email address, no account. They are kept for as long as the Site is operated, in order to run the service and to measure its use in aggregate form. Without an identifier, we cannot retrieve such a result from your identity alone; if you have kept the link to your result, you may request its deletion at contact@syntropic-studio.fr.
Data linked to a purchase (email address, payment status and date, payment session identifier, timestamp and text of your waiver of the right of withdrawal, delivery email date). This data is kept for 10 years from the purchase, a period required by Article L123-22 of the French Commercial Code for accounting records, and by the need to retain proof of the transaction and of the waiver. During that period, your Report remains accessible from the link sent to you by email.
Deletion. Deletions and anonymizations are carried out following a request sent to contact@syntropic-studio.fr, within the one-month period stated in Article 8. You may at any time request the erasure of data that is not required to meet our accounting obligations, in particular your email address; where applicable, the only data retained until the end of the 10-year period is the data required on that basis.
6. Cookies and trackers
The Site does not use analytics, profiling or advertising cookies. Only cookies strictly necessary for the operation of the Site may be used; they do not require your consent. During payment, you are redirected to Stripe, which places its own cookies necessary for security and fraud prevention, governed by Stripe's privacy policy.
7. Security
Access to the database is restricted to the application server by means of a secret key; the database is configured to prohibit any direct public access. Payment information is processed by Stripe over encrypted connections.
8. Your rights
In accordance with the GDPR, you have the rights of access, rectification, erasure, restriction, objection and portability, as well as the right to define directives on the fate of your data after your death. To exercise them, write to contact@syntropic-studio.fr. A response will be provided within one month.
You may also lodge a complaint with the French Data Protection Authority (CNIL), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France, www.cnil.fr.
9. Minors
The Site is accessible from the age of 15. Data collected from a minor benefits from a reinforced right to erasure: any person may request the deletion of data concerning them that was collected while they were a minor. Purchase of the Report requires being of legal age or having the authorization of the holder of parental authority.
10. Contact
For any question regarding this policy or your data: contact@syntropic-studio.fr. No Data Protection Officer (DPO) has been appointed, as this is not mandatory; the address above is the point of contact for any request.
11. Amendment
This policy may be updated. The applicable version is the one published on the Site on the date of your consultation.